VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Dec 22, 2020· Updated Jun 17, 2026

CVE-2020-24673

CVE-2020-24673

Description

In S+ Operations and S+ Historian, a successful SQL injection exploit can read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database (such as shutdown the DBMS), recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system. This can lead to a loss of confidentiality and data integrity or even affect the product behavior and its availability.

Affected products

14
  • Abb/Symphony \+ Historian2 versions
    cpe:2.3:a:abb:symphony_\+_historian:3.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:abb:symphony_\+_historian:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_historian:3.1:*:*:*:*:*:*:*
  • Abb/Symphony \+ Operations8 versions
    cpe:2.3:a:abb:symphony_\+_operations:1.1:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:abb:symphony_\+_operations:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:2.1:sp1:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:2.1:sp2:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:abb:symphony_\+_operations:3.3:*:*:*:*:*:*:*
  • Abb/S+ Historianllm-create
  • Abb/S+ Operationsllm-fuzzy
  • Abb/Symphony Plus Historiancpe-rescue
    Range: unspecified
  • Abb/Symphony Plus S\+ Operationscpe-rescue
    Range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.